A Missouri grand jury has indicted 4 men, including a pair of brothers, for their roles in a huge spam operation which targeted over 2,000 colleges. Authorities say Amir Ahmad Shah and his brother Osmaan created a program that harvested over 8 million student addresses from those colleges. Those addresses were then sent thousands of spams hawking such things as digital cameras and spring break specials. In order to gain the students’ trust, the brothers claimed to be campus representatives and that the businesses were alumni-owned, both of which were untrue

          “Nearly every college and university in the United States was impacted by this scheme,” Matt Whitworth, acting U.S. attorney for the Western District of Missouri, said in a statement. “Illegal hacking and e-mail spamming wreaks havoc on computer networks. These schools spent significant funds to repair the damage and to implement costly preventive measures to defend themselves against future intrusions.”

The operation allegedly netted over $4.1 million. The Shah’s and their company face 26 charges of aiding and abetting each other to access a protected computer without authorization and transmit commercial emails with the intent to deceive or mislead the recipients about the origin of the messages, as well as with conspiracy to engage in an unlawful spam operation and multiple charges of fraud using computers and email. They face a minimum of 10 years in jail as well as stiff fines.